
Europaisches Patentamt 
European Patent Office 
Office europ£en des brevets 




(n) Publication number : 0 549 488 A1 



02) 



EUROPEAN PATENT APPLICATION 



@ Application number : 92420460.5 
<g) Date of filing : 14.12.92 



© int. CI. 6 : G11B 7/24, G1 1B 7/26 



(So) Priority: 20.12.91 US 810976 

© Date of publication of application : 
30.06.93 Bulletin 93/26 

(84) Designated Contracting States : 
DE FR GB NL 

(n) Applicant: EASTMAN KODAK COMPANY 
343 State Street 

Rochester, New York 14650-2201 (US) 



@ Inventor : Lentz, Joseph Paul, do EASTMAN 
KODAK COMPANY 
Patent Legal Staff, 343 State Street 
Rochester, New York 14650-2201 (US) 
Inventor : Cushman, Thomas Richard, do 
EASTMAN KODAK COMPANY 
Patent Legal Staff, 343 State Street 
Rochester, New Yoric 14650-2201 (US) 
Inventor: Kline, Patrick Joseph, do EASTMAN 
KODAK COMPANY 
Patent Legal Staff, 343 State Street 
Rochester, New York 14650-2201 (US) 

@ Representative : Buff, Michel et al 

Kodak-Path6 D6partement des Brevets et 
Licences CRT Centre de Recherches et de 
Technology Zone Industrlelle 
F-71102 Chalon sur Sadne C6dex (FR) 



A storage media for an optical Information system having an identification code embedded therein. 
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@ A optical storage disc for use in an optical 
storage system includes a storage layer which is 
capable of being disrupted when a laser beam 
of sufficient intensity is focused thereon. The 
optical storage disc has a transparent substrate 
layer on one side of the storage layer and a 
lacquer layer on the other side of the storage 
layer. The disruptions provided by the laser 
beam are selected to provide human readable 
and/or machine readable patterns. To reduce 
the damage to potions of the optical disc other 
than the storage layer, the storage layer is 
exposed to the laser beam prior to curing, or 
prior to applying and curing the lacquer layer. 
The optical disc can be of the type with data 
written thereon during fabrication, or the disc 
can be of the type in which data can be impress- 
ed thereon after fabrication of the optical disc 
The patterns on the optical disc can be in the 
form of optical bar codes. In one application of 
the present invention involving the type of disc 
on which data can be written after fabrication, 
the pattern resulting from application of the 
laser beam to the disc is read by an optical 
reading device and transferred to the disc in the 
data format 
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BACKGROUND OF THE INVENTION 

1. Field of Invention 

This invention relates generally to the media 5 
upon which information is stored in an optical infor- 
mation storage and retrieval unit and, more particular- 
ly, to the inclusion in the media of an indelible identi- 
fying code. 

10 

2. Description of the Related Art 

At the present state of technology, the optical 
storage disc is the preferred medium for read-only 
storage of large quantities of information. In this me- 15 
dium, the information is retrieved through the interac- 
tion of a radiation beam with the storage medium. At 
present, three principal types of optical storage discs 
are in common use. The first type of optical storage 
disc Is manufactured with the information stored 20 
therein, generally In the form depressions formed 
into a polycarbonate substrate. A reflecting coating is 
deposited on the polycarbonate substrate and the ra- 
diation beam is focused on the reflecting layer. This 
type of optical disc is frequently referred to as a CD 25 
audio disc or a ROM (i.e., read only memory) disc. 
The second type of optical storage disc has the ca- 
pabilfty of having information recorded (written) 
thereon at some time after the fabrication of the disc. 
Such an optical storage disc is frequently referred to 30 
as a writable optical storage disc. The third type of 
optical storage disc has the capacity to have informa- 
tion recorded on the disc after fabrication. In addition, 
at a later time the stewed information can be erased 
or modified. This type of optical storage disc is gen- 35 
erally referred to as an erasable or a re-writable opt- 
ical storage disc. In each type of optical storage disc, 
the storage layer is supported and protected by a 
polycarbonate support substrate and by a protective 
(lacquer) overcoat layer. However, the storage layer 40 
is modified in the writable disc and in the erasable 
disc. The storage layer in the writable disc includes a 
reflector layer (generally fabricated from gold) proxi- 
mate the lacquer overcoat layer and includes a re- 
cording layer, typically a dye polymer layer, proximate 45 
the polycarbonate layer. The newly fabricated writ- 
able optical storage disc has a recording layer that is 
responsive to radiation having selected parameters, 
the radiation changing the optical properties of the re- 
cording layer. Differences in the optical properties of so 
the recording layer can be detected, through the in- 
teraction wfth an impinging radiation beam and infor- 
mation, encoded by means of the optical property 
changes, can be recovered. In order to simplify the 
discussion, the recording, storage, and/or the reflec- 55 
tive layer of the writable optical disc will be referred 
to as the storage layer. 

During and after the manufacturing process, a 



need has been felt for a technique for providing per- 
manent identification for the disc. In this manner, any 
problems that might originate with the manufacturing 
process can be related to discs fabricated during the 
same period of time or even to the same batch. Sim- 
ilarly, the history of the usage of the disc can be de- 
termined when a record is kept of the identifying in- 
formation at the time of the accessing of the disc. 

In the prior art, information has been applied to 
the surface of the disc, by means of mechanical dis- 
ruption of the surface or by deposition of legible ma- 
terial on the surface. This information, however, be- 
ing on the surface of the disc can be compromised 
either accidentally or intentionally. 

Recently, in U.S. Patent No. 4,961,077 issued to 
D. L. Wflson et at., a technique for the permanent lab- 
elling of the discs was described. Specifically, the 
metal reflective layer, upon which the permanent 
identification information is stored as areas of varying 
reflectivity, is marked by means of a pulsed laser. The 
pulsed laser causes an Indelible marking on the re- 
flective layer, a marking which is protected by the 
same transparent coating which protects the reflec- 
tive coating. The process described in the Wilson ref- 
erence is extremely sensitive to the energy level of 
the laser beam, too small an energy level in the laser 
beam not providing an identifiable marking, while too 
much energy can disrupt the lacquer overcoat layer 
and/or the polycarbonate layer used to protect the re- 
flective layer. The disruption of the storage layer can 
result in damage to the surrounding portions of the 
optical disc. In addition, applying the laser beam to 
the reflective surface through the narrower of the 
two protective coatings is recommended to minimize 
the destructive effects of the laser beam resulting 
from the passage of high intensity radiation through 
the layers. 

A need has been felt for a technique for providing 
indelible identifying markings for the discs storing 
optical information which is relatively insensitive to 
the power of the radiation beam and which reduces 
the damage to the optical disc. Also needed is a tech- 
nique for enhancing the machine readability of the 
disc markings. 

SUMMARY OF THE INVENTION 

The present invention is directed to overcoming 
one or more of the problems set forth above. Briefly 
summarized, according to one aspect of the present 
invention, the marking of the disc is performed on the 
storage layer of the optical disc, however, the mark- 
ing is performed prior to the curing of the protective 
lacquer overcoat or prior to the application of the pro- 
tective overcoat itself. Because the lacquer overcoat, 
prior to curing of this material, is relatively elastic, the 
disruption of the overcoat as a result of the laser in- 
teraction with the reflective layer can be accomplish- 
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DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

1, Detailed Description of the Figures 

Referring to Figure 1 , a cross-sectional view of a 
read-only optical storage disc 10 for storing prere- 
corded data (in a form which can be Identified by a ra- 
diation beam interacting with the disc) is shown. 
Transparent polycarbonate or substrate layer 12, or 
similar material has an optical transmission character- 
istic which permits the radiation interacting with the 
storage layer structure of the optical disc to be trans- 
mitted therethrough. The polycarbonate layer also 



acts as a support and protection layer for the remain- 
der of the optical disc. Next to the polycarbonate layer 
1 2 is the aluminum ref lector layer 11 . The polycarbon- 
ate layer 12 is fabricated with the stored information 
as a surface structure. The reflecting layer Is depos- 
ited in such a manner as to provide a surface gener- 
ally retaining the structure of the polycarbonate sur- 
face. A lacquer or other protective overcoat layer 13 
is applied to the aluminum reflector layer in an un- 
cured state. The lacquer or protective layer is typically 
of the type which is cured by ultraviolet radiation and 
the cured lacquer layer 13 supports and protects the 
aluminum reflector layer 11. In the past, identification 
markings 14 have been typically printed on the sur- 
face of the lacquer overcoat layer 13 or mechanically 
scribed in the surface of lacquer overcoat layer 13. 

Referring to Figure 2, a writable optical storage 
disc 20 used for the storage of information is shown. 
In this type of optical storage disc, the data can 
be 'written 9 on the disc after the disc is fabricated. As 
with the optical storage disc of Figure 1, the writable 
optical disc Includes a polycarbonate substrate of 
support layer 22. The storage layer 5 of the disc con- 
sists of a recording layer 21, which can be a dye poly- 
mer layer, and reflector layer 25, which can be fabri- 
cated from gold. Next to the reflector layer 25 is a lac- 
quer overcoat layer 23, which is applied and then 
cured. Finally, the markings 24 on the surface of the 
disc provide human and machine readable informa- 
tion. 

Referring to Figure 3A, the process for providing 
indelible Information on a disc is shown. In step 31, 
the several layers of the optical disc is assembled. In 
step 32, the storage layer and the reflecting layer of 
the optical disc has information applied thereto, typ- 
ically by using laser radiation to disrupt an interior sur- 
face region. In step 33, the lacquer overcoat layer is 
cured, providing the final step in the fabrication of an 
optical disc according to the present invention. In Fig- 
ure 3B, an alternative process for providing indelible 
information on an optical disc Is shown. In step 35, 
several layers of the optical disc are assembled. How- 
ever, the surface region of the storage layer and re- 
flective layer, on which the writing is to be inscribed, 
does not have the lacquer or protective coating ap- 
plied thereon. In step 36, the marking of the surface 
is accomplished. In the preferred embodiment this 
marking Is accomplished by focused high intensity ra- 
diation, such as focused laser radiation. In step 37, 
so the newly applied protective overcoat is applied to the 
region which has been marked and, If required, the 
protective coating is cured. 

Referring to Figure 4A, a phenomenalogical rep- 
resentation of an identifying mark on an optical disc, 
65 capable of having information written thereon after 
fabrication, is shown. The disc 20 is fabricated with a 
polycarbonate layer 22, a reflecting layer 25, and a 
lacquer overcoat layer 23. The disruption 4 caused by 



ed without excessive damage. The markings provid- 
ed by the laser beam are arranged in preselected pat- 
terns, the patterns including machine readable and 
human readable information. According to one em- 
bodiment, optical bar code patterns can be printed in 5 
a manner thatthe position of an optical barcode read- 
er relative to the center of the disc is irrelevant in in- 
terpreting the optical bar code message. 

These and other aspects, objects, features and 
advantages of the present invention will be more 10 
clearly understood and appreciated from a review of 
the following detailed description of the preferred em- 
bodiments and appended claims, and be reference to 
the accompanying drawings. 

15 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a cross sectional view of an optical 
storage disc of the type generally referred to as a 
read-only optical storage disc. 2C 

Figure 2 Is a cross sectional view of an optical 
disc of the type generally referred to as a writable opt- 
ical storage disc. 

Figure 3A illustrates a first embodiment of a proc- 
ess by which machine readable and human readable 25 
information can be indelibly fixed in the optical stor- 
age media, and Figure 3B illustrates a.second em- 
bodiment of a process by which machine readable 
and human readable information can be indelibly 
f faced in an optical storage media. so 

Figure 4 is a cross sectional view of a mark in an 
optical storage disc generated as a result of the proc- 
ess illustrated in Figure 3A, while Figure 4B is a cross 
sectional view of a mark in an optical storage disc 
generated as a result of the process ilustrated in Fig- 35 
ure 4B. 

Figure 5 illustrates an optical disc having machine 
readable and human readable text printed thereon. 

Figure 6 illustrates how the optical bar code char- 
acters are formed according to the present invention. 40 

Figure 7 is a block diagram of the storage medium 
and the read/write head including apparatus associ- 
ated therewith of the storage and retrieval unit 
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the laser radiation is in the reflector layer 25, depend- 
ing on the intensity of the radiation can extend to or 
into the polycarbonate layer. In Fig. 4B, the disc 20 is 
assembled with the polycarbonate layer 22 ( the re- 
flecting layer 25, and the lacquer or protective over- 5 
coat layer 23. However, a region 25' is not covered by 
the lacquer overcoat The radiation causes a disrup- 
tion in a selected region of the reflecting layer 25. The 
radiation parameters can be adjusted to provide rela- 
tively little impact on the polycarbonate substrate. The 10 
region without the lacquer overcoat can have also 
have printing applied thereto. The additional lacquer 
overcoat is applied, protecting the disrupted and/or 
printed region and protecting the information repre- 
sented thereby from compromise. is 

Referring to Figure 5, a top view of a optical stor- 
age disc, particularly a type of disc 50 known as a 
compact disc (CD) is shown. The optical disc 50 typ- 
ically has four regions which, with increasing radius 
can be defined as the following. Aperture 56 provides 20 
a structure to engage a spindle for controlled rotation 
of the disc. The next area is a clamp area 53. The 
clamp area 53 typically does not have a storage layer 
associated therewith and is used to provide a space 
wherein the spindle can be mechanically coupled to 25 
the disc without interfering with access to the data 
stored on the disc. The mirror area 52 has a storage 
layer associated therewith but does not have data 
embedded therein and, therefore, has a mirror-like 
appearance. Data area 51 of disc 50 has data stored 30 
on the storage layer including the reflecting layer as- 
sociated therewith and, consequently, because of the 
structure in the reflecting layer, has a dull appearance 
when compared to the mirror-like appearance of mir- 
ror area 52. The mirror area 52 can be labelled in erth- 35 
er a machine readable code 55 and/or with human 
readable markings by the process described in Figure 
3A and Figure 3B, and illustrated by Figure 4A and 
Figure 4B. The disc 50 can therefore be labelled or 
marked by carbonizing the plastic in damp area 53, 40 
marking the mirror area 52 of an optical disc 50 in the 
presence of an uncured lacquer overcoat layer 23 and 
then curing the lacquer overcoat layer as described 
above, marking the mirror area 52 of the disc prior to 
application of the protective overcoat 41 and curing of 45 
the lacquer overcoat region 41 after application of the 
protective coating, or marking the mirror region 52 af- 
ter the protective layer 23 is cured. In the preferred 
embodiment, a group of alpha/numeric characters 57 
are printed in the clamp area 53 and identifying fab- 60 
rication information. Alpha/numeric characters 58 are 
provided in a human readable format and are printed 
on the surface of the mirror region 52. Code charac- 
ters 59 are provided in the mirror region 52 in a ma- 
chine readable (Le., bar code) format 55 

Referring to Figure 6, an expanded view of the 
technique for writing information capable of being in- 
terpreted by an optical bar code reader In a manner 



in which the distance of the reader from the center of 
the disc is not important, even though the linear ve- 
locity of the optical code past the reader is a function 
of radius. The optical bar code markings 61 are 
formed by marking the area between two radius lines 
61 and 62 from a first radial distance (Ri) 64 to a sec- 
ond radial distance (R2) 65. With this bar code con- 
figuration, for a constant angular velocity of the disc, 
the distance of a bar code reader from the center of 
the disc is irrelevant The time each bar interacts opt- 
ically with the detector of the optical bar code reader 
retrieving information from the storage is indepen- 
dent of the distance from the disc center. 

Referring to Figure 7, apparatus for reading the 
machine readable markings on an optical disc 70 is 
shown. Aread/write head 75 applies radiation suitable 
for reading information to the markings to the disc. 
The reflected radiation has an intensity modulated by 
the identification markings 72. The optical read/write 
head 75 can identify the intensity of the reflected sig- 
nal, or, the detector 76 can identify transmitted radi- 
ation. The resulting signals from either read/write 
head 75 or from detector 76 are applied to the ana- 
lyzing and storage apparatus 77 where the data is 
processed and, when required stored. When the opt- 
ical disc 70 is a disc upon which information can be 
written, the analyzing and storage apparatus 77 can 
be used to control the information written on the disc. 
In this manner, the information identifying the optical 
disc can be encoded and written on the data portion 
of the disc in a format compatible with the other data 
written thereon. 

Briefly summarized, according to one aspect of 
the present invention, the marking of the disc is per- 
formed on the storage layer of an optical storage disc, 
however, the marking is performed prior to the curing 
of the lacquer overcoat layer according to one em- 
bodiment and prior to the application of the lacquer 
coating in a second embodiment In the optical stor- 
age disc of the present invention, the overcoat is fab- 
ricated from a lacquer material for which ultraviolet 
light provides the curing reaction and reduces the 
elasticity of the overcoat 

2. Operation of the Preferred Embodiment 

The purpose of the invention is to provide a tech- 
nique for the application of an indelible identifying 
marks to an optical disc. Briefly summarized, accord- 
ing to one aspect of the present invention, the mark- 
ing of the disc is performed on the storage layer, how- 
ever, the marking is performed prior to the curing of, 
or prior to the application of the lacquer or protective 
overcoat layer. Where not previously applied, the pro- 
tective overcoat is then applied. The lacquer material 
is then exposed to ultraviolet light which provides the 
curing for the lacquer overcoat layer. By marking stor- 
age layer prior to curing of the lacquer overcoat layer, 
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such modifications and applications as do not depart 
from the true spirit and scope of the invention. 



Claims 



the lacquer overcoat layer, when present remains pli- 
able enough to absorb damage that would otherwise 
result from the disruption of the polycarbonate layer. 

In the optical disc capable of having information 
written or stored thereon after fabrication, the present 
invention has an important application. A facility capa- 
ble of only reading the optical disc would typically not 
have the apparatus to interpret the optical bar code. 
Without the ability of read and interpret the bar code 
automatically, information can be stored on the disc 
which is not appropriate for that disc. Therefore, at the 
facility where the data is added to the fabricated disc, 
an optical bar code reader can be used to identify the 
optical bar code information and to include the infor- 
mation automatically in the data written or stored on 
the disc. In other words, the simultaneous presence 
of bar coded encoded information and equivalent in- 
formation stored in the format of the information writ- 
ten on the optical disc insures that the disc has not 
been compromised. 

While the storage medium has been described 
both In general terms and in terms of an optical disc, 
other medium for the storage of optical information, 
which have the general layer structure of the optical 
disc, can use the present invention advantageously. 
In addition, the storage layer has been described as 
generally including a reflective layer. The use of the 
reflection of radiation from a storage disc is generally 
used to identify the information stored thereon. How- 
ever, the use of an optical storage disc which relies on 
the interaction of transmitted radiation with the stor- 
age media could use the present invention advanta- 
geously. 

Similarly, whle the invention has been described 
with particular reference to a preferred embodiment, 
it will be understood by those skilled in the art that va- 
rious changes may be made and equivalents may be 
substituted tor elements of the preferred embodiment 
without departing from invention. In addition, many 
modifications may be made to adapt a particular sit- 
uation and material to a teaching of the invention with- 
out departing from the essential teachings of the 
present invention. By way of specific example, the 
lacquer layer used proximate the storage layer could 
be implemented with any material having properties 
suitable for the protection of the storage layer. Byway 
of a different example, in the erasable optical disc, 
the storage layer can be selected of a material where- 
in an impinging radiation beam this appropriate para- 
meters can provide a non-reversible change can take 
place. The non-reversible change protected from 
compromise by the protective overcoat layer. 

As is evident from the foregoing description, cer- 
tain aspects of the invention are not limited to the par- 
ticular details of the examples illustrated, and it is 
therefore contemplated that other modifications and 
applications will occur to those skilled in the art It is 
accordingly intended that the claims shall cover all 



1. A optical storage disc capable of having identifi- 
able marking stored thereon, said markings re- 
sulting from an interaction of a laser beam with 

10 said optical storage disc, said optical storage disc 
comprising: 

a support substrate layer, said support 
substrate layer being transparent; 

a storage layer proximate said support 
15 substrate layer and capable of having data stored 

thereon, said storage layer having a preselected 
pattern of disruptions in a selected region result- 
ing from irradiation by said laser beam; 

a protective layer covering said proximate 
20 said storage layer. 

2. The optical storage disc of Claim 1 wherein said 
protective layer is applied prior to fabrication of 
said preselected pattern of disruptions, said pro- 

25 tective layer being cured after fabrication of said 

preselected pattern of disruptions. 

3. The optical storage disc of Claim 1 wherein said 
protective layer is applied to said selected region 

so after fabrication of said preselected pattern of 

disruptions. 

4. The optical storage disc of Claim 3 wherein said 
pattern of disruptions in said storage layer can be 

35 human readable or machine readable. 

5. The optical disc of Claim 3 wherein said pattern 
of disruptions can be read by an optical bar code 
reader. 

40 

6. The optical storage disc of Claim 5 wherein said 
pattern of disruptions is structured such that a 
position of said optical bar code reader with re- 
spect to said field is independent of radial posl- 

45 tion. 

7. The optical storage disc of Claim 3 wherein said 
storage disc is selected from the group of optical 
discs comprised of write-once optical discs, writ- 

50 able optical discs and erasable optical discs data 

identified by said pattern of disruptions being 
written on a mirror region of said optical disc 

8. The optical storage disc of Claim 3 wherein said 
55 storage layer includes a dye polymer layer. 

9. The optical storage disc of Claim 1 wherein said 
pattern of disruptions includes information with 
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respect to the fabrication of said disc. 

10. Amethod of permanently marking an optical stor- 
age disc, said method comprising the steps of: 

assembling an optical disc having a stor- 
age layer and a polycarbonate layer; 

applying a pattern of disruptions on a se- 
lected region of said storage layer with a laser 
beam; and 

protecting said selected region of said 
storage layer with a lacquer layer. 



viding said identifying markings. 

1 8. The optical disc of Claim 1 6 further characterized 
by applying said protective overcoat to said se- 

5 lected region after providing said identifying 

markings. 

19. The optical disc of Claim 18 further characterized 
by selecting said pattern of disruptions to repre- 

w sent data in bar code format. 

20. The optical disc of Claim 18 wherein said optical 
storage disc is a writable optical storage disc hav- 
ing a recording layer associated with said storage 
layer, said optica! storage disc further character- 
ized by said data in barcode format replicated on 
said recording layer in an storage layer format 

21. The optical storage disc of Claim 18 further char- 
acterized by optical bar code characters posi- 
tioned to be read by scanning the characters dur- 
ing rotation of the disc, said optica) bar code char- 
acters having an angular width that is a linear 
function of radial position. 



11. The method of Claim 10 wherein said optical disc 
can be a write-once optical disc or a writable opt- 
ical disc, a writable optical disc having a recording is 
layer associated with said reflecting layer. 

12. The method of Claim 11 wherein said protecting 
step includes a step of covering said selected re- 
gion with a lacquer overcoat prior to said applying 20 
step and curing said lacquer overcoat after said 
applying step. 

13. The method of Claim 11 wherein said protecting 
step includes a step of covering said selected re- 25 
gion with a protective overcoat following said ap- 
plying step. 

14. The method of Claim 13 further comprising a step 

of selecting said pattern of disruptions to provide 30 
an optical bar code, wherein a thickness of each 
bar code character is a linear function of distance 
from a center of said optical disc. 

15. The method of Claim 13 further comprising the 36 
steps of: 

during a write operation for a writable or 
erasable optical disc, reading by a optical bar 
code reader said pattern of disruptions, and 

writing information identified by said opti- 40 
cat bar code reader in a data format on said writ- 
able or erasable optical disc. 

16. An optica) disc of a type having a polycarbonate 
substrate layer and a storage layer, said storage 45 
layer having a pattern of disruptions providing 
identifying markings, wherein the improvement is 
characterized by: 

protecting said pattern of disruptions in a 
selected region by a protective layer consisting of go 
a material requiring a curing operation, wherein 
said protective layer is cured after providing said 
identifying markings. 

17. The optical disc of Claim 1 6 wherein said protec- 55 
tive layer requires a curing operation, said optical 
disc further characterized by applying said pro- 
tective layer to said selected region prior to pro- 
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Description 
TECHNICAL FIELD 

The present invention relates to an optical disk, an 
optical disk system and a cryptocommunication 
method. 

BACKGROUND 

In recent years, with the increased use of networks 
such as the Internet and optical CD ROM disks, network 
soft key distribution for optical ROM disks has 
increased. Also, electronic commercial transactions 
have increased. 

Soft key electronic distrtoution systems for CD- 
ROM media have been used. In conventional systems, 
it is known to give passwords and decipher the enci- 
phered soft ciphers recorded on the CD-ROMs in 
advance. When CD-ROMs are used, however, rt is not 
possible additionally to record on the disks, so that it is 
not possible to individually set IDs for respective disks. 
Therefore, one password would release the ciphers of 
aO the disks manufactured from the same original disk. 
For this reason, when CD-ROMs are used, it is neces- 
sary to install the disks 1 IDs on the hard disks of per- 
sonal computers, or mail to users IDs prepared 
centrally. 

In electronic distribution systems with conventional 
optical disks and/or optical disk systems, there is a need 
to provide the disks and/or systems with IDs and/or 
cipher keys. It is an object of the present invention to 
simply provide IDs and cipher keys for ROM disks in 
electronic distribution systems. 

SUMMARY OF THE INVENTION 

To achieve the objects of the present invention, the 
pit portions of optical disks are provided with an addi- 
tional recording area or Burst Cutting Area (hereinafter 
abbreviated as BCA) overwritten with a bar code and, 
when the «fisks are manufactured, IDs differing for each 
disk and, according to the need, cipher keys for commu- 
nication and decoding keys for decoding key cipher 
texts for communication, are recorded individually in the 
BCA areas. As a result when the disks have been dis- 
tributed to users, the user ID numbers, the cipher keys 
for transmission for communication, and the decoding 
keys for reception are distributed automatically to the 
users. It is therefore posstole to omit some of the proce- 
dures that complicate conventional systems. Also, cryp- 
tocommunication and the identification of disks are 
made possfole at the same time. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a flow chart of an optical cfisk according to 
an embodiment of the present invention. 

Figs. 2a-c are cross sections and results of trim- 



ming with a pulse laser according to an embodiment of 
the invention. 

Figs. 3a-g show the signal reproduction waveforms 
at a trimming portion according to an embodiment of the 
s invention. 

Fig. 4 is a block diagram of a reproducer according 
to an embodiment of the invention. 

Fig. 5a shows the waveform of a reproduced signal 
at a BCA part according to the invention. Fig. 5b shows 
io dimensional relationships of a BCA part according to 
the invention. 

Fig. 6 shows a method of cryptocommunication and 
a cipher key method by means of a password according 
to an embodiment of the present invention. 
is Figs. 7a-c show the format of a BCA according to 
the invention. 

Fig. 6 shows a method of cryptocommunication and 
a method of unlocking a cipher with a password accord- 
ing to an embodiment of the invention. 
20 Fig. 9 shows a procedure for operation of a disk, the 
content part of which may have been licensed, accord- 
ing to an embodiment of the invention. 

Fig. 10 is a block diagram of an example wherein a 
BCA has been recorded in a RAM cfisk according to an 
25 embodiment of the present invention. 

Fig. 11 is a block diagram of a method or system for 
prevention of unauthorized copying accorcfing to an 
embodiment of the invention. 

Fig. 12 is a flow chart depicting preventing unau- 
30 thorized copying according to an embodiment of the 
invention. 

Fig. 13a is a plan view and Fig. 13b is a cross sec- 
tion of an optical disk, on the BCA of which an article or 
commodity bar code has been printed, according to an 

35 embodiment of the invention. Fig. 13c shows a method 
of producing an optical disk according to an embodi- 
ment of the invention. 

Fig. 14 is a block diagram of a POS settlement sys- 
tem with a ROM cfisk having a BCA and a POS terminal 

40 according to an embodiment of the invention. 

Fig. 15 is a flow chart of cipher release in and 
between a press company, a software company and a 
selling store, according to an embodiment of the 
present invention. 

45 Figs. 16 and 17 are flow charts (Parts 1 and 2, 
respectively) of steps of enciphering and decoding 
cipher data with a disk ID and/or the like according to an 
embodiment of the invention. 

Figs. 18, 19 and 20 are flow charts (Parts 1, 2 and 

so 3, respectively) of communication cipher key distribution 
and cryptocommunication with a BCA according to an 
embodiment of the invention. 

Figs. 21, 22 and 23 are flow charts (Parts 1, 2 and 
3, respectively) of an electronic settlement system with 

ss a BCA according to an embodiment of the present 
invention. 

Fig. 24 is a block diagram of a method of recording 
and reproducing for recording limitation to one RAM 
disk with a BCA according to an embodiment of the 
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invention. 

At the end of this specification is appended a list 
identifying Hems corresponding to the reference numer- 
als used in the aforementioned drawings, that listing 
being in consecutive numerical order of the reference s 
numerals. 

DETAILED DESCRIPTION OF THE INVENTION 

The present invention will be described on the basis io 
a number of embodiments. Herein, an additional record- 
ing area using the BC A system is referred to as a 'BCA 
area , and data recorded in a BCA is referred to as *BCA 
data*. In addition, first identification data is referred to as 
•ID' or 'disk ID\ 15 

Fig. 1 shows a typical process for producing a disk 
with a BCA. The first cipher key 802, such as a public 
key, is used by a cipher encoder or scrambler 803 to 
encipher contents 777 into the first cipher 805. An 8-16 
modulator 91 7, such as a mastering unit, modulates the so 
first cipher 805. A laser records the modulated signal as 
pits in the first recording area 919 of an original disk 
800. A molding machine 808a uses the original disk 800 
to mold disk-like transparent substrates (not shown). A 
reflecting film making machine 808b forms reflecting A! 25 
films, and makes single-sided disks 809a and 809b 
which are each 0.6 millimeter thick A bonding machine 
808c laminates these disks together to make a com- 
pleted disk 809. A trimming unit 807 modulates the disk 
ID 921 , the first cpher decocfing key 922, or the second so 
cipher key 923 for Internet communication in the second 
recording area 920 of the completed disk 809, with a 
Phase Encoding-Return to Zero (PE-RZ) modulator 
807a which combines PE modulation and RZ modula- 
tion. A pulse laser 807b effects BCA trimming to make a ss 
disk 801 with a BCA. Because laminated disks are 
used, it is not possible to after the BCA inside, and thus 
the completed disk can be used for security. 
A BCA wifi next be explained briefly. 
As shown In Fig. 2a, a pulse laser 808 trims the 40 
reflecting aluminum films 809 of the two-layer disk 800 
in a BCA to record a stripe-like low reflection part 81 0 
on the basis of a PE modulating signal. As shown in Ftg. 
2b, BCA stripes are formed on the disk. If the stripes are 
reproduced by a conventional optical head, the BCA 45 
has no reflecting signal. Therefore, as shown in Fig. 2c, 
gaps 810a, 810b and 810c are produced, where the 
modulating signal is missing. The modulating signal is 
sliced at tie first slice level 915. But, the gaps 810a-c 
have a low signal level, and can therefore be sliced eas- so 
ity at the second sfice level 916. As shown with the 
recorded and reproduced waveforms in Fig. 3, it is pos- 
sible to reproduce the formed bar codes 923a and 923b 
by level-slicing them at the second slice level 916 by a 
conventional optical pickup as shown in Fig. 3a As ss 
shown in Fig. 3f, the waveforms of the codes are shaped 
by a LPF fBter so as to PE-RZ decode the codes. As 
shown in Fig. 3g, a digital signal is output 

With reference to Fig. 4, the decoding operation will 



be explained. A disk 801 with a BCA includes two trans- 
parent substrates, which are laminated with a recording 
layer 801a between them. The recording layer may 
either be a single layer 801a or include two recording 
layers 800a and 800b. If there are two layers, a BCA flag 
922 is recorded in the control data of the first recording 
layer 800a, which is adjacent to the optical head 6. The 
flag 922 indicates whether a BCA is recorded or not. 
Because a BCA is recorded in the second layer 800b, 
the first recording layer 800a is focused on first, and the 
optical head 6 is moved to the radial position of the con- 
trol data 924 in the innermost edge of the second 
recording area 919. The control data is main data, and 
has therefore been Eight to Fourteen Modulation 
(EFM), 8-15 or 8-1 6 modulated. Only when the BCA flag 
922 in the control data is '1\ a single/double layer 
switching part 827 focuses on the second recording 
layer 801b to reproduce the BCA. If the signal is sliced 
by a level slicer 590 at the general first slice level 915 as 
shown in Fig. 2c, it is converted into a digital signal. This 
signal is demodulated in the first demodulation part by 
an EFM demodulator 925. an 8-15 modulator-demodu- 
lator 926 or an 8-16 modulator-demodulator 927. An 
ECC decoder 36 corrects errors, if any, and outputs 
main data. The control data in the main data is repro- 
duced and only if the BCA flag 922 is 1 is the BCA read. 
When the BCA flag 922 is 1, a CPU 923 orders the sin- 
gle/double layer switching part 827 to drive a focus 
adjustment part 828, switching the focus from the first 
recording layer 801a to the second recording layer 
801b. At the same time, the optical head 6 is moved to 
the radial position of the second recording area 920, 
that is, for the DVD standard, the BCA is recorded 
between 22.3 and 23.5 mm from the inner edge of the 
control data. Then the BCA is read. Reproduced in the 
BCA area Is a signal with a partially missing envelope 
as shown in Ftg. 2c By setting in the second level slicer 
929 the second slice level 916 of which the quantity of 
Bght is smaller than that of the first slice level 915, it is 
possible to detect the missing parts of the reflecting por- 
tion of the BCA, and a digital signal is output. This signal 
ts PE-RZ demodulated by the second demodulation 
part 930, and ECC decoded by an ECC decoder 930b 
so as to output BCA data, which is auxiliary data. Thus, 
the first demodulator 928, operative according to, 8-16 
modulation demodulates and reproduces the main data, 
while the second demodulation part 930 operative 
according to PE-RZ modulation demodulates and 
reproduces the auxiliary data, that is, the BCA data. 

Fig. 5a shows the reproduced waveform before 
passage through a filter 943. Fig. 5b shows the working 
size accuracy (precision) of the slits of the low reflecting 
portion 810. ft is dffiteult to make the slit width less than 
5mm. In addition, if the data is not recorded inward radi- 
ally from 23.5 mm. it will not be properly reproduced. 
Therefore, for a DVD, because of the limitations of the 
shortest recording cycle of 30 mm and the maximum 
radius of 23.5 mm, the maximum capacity after format- 
ting is limited to 188 bytes or less. 
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The modulating signal is recorded as pits by the 8- 
16 modulation mode, and a high frequency signal such 
as the high frequency signal part 933 in Fig. 5a is 
obtained. However, the BCA signal is a low frequency 
signal like low frequency signal part 932. Thus, if the 
main data complies with the DVD standard, it is a high 
frequency signal 932 which is about 4.5 MHz or less, 
shown in Fig. 5a, and the auxiliary data is a low fre- 
quency signal 933 which is 8.92 ms in period, that is, 
about 100 kHz. It is therefore relatively simple to fre- 
quency-separate the auxiliary data with a LPF 943. A 
frequency-separating method 934 as shown in Fig. 4, 
including the LPF 943 can easily separate the two sig- 
nals. In this case, the LPF 943, may be simple in struc- 
ture. 

The foregoing is an outline of the BCA. 

With reference to Fig. 6, the overall system of a 
cipher software unlatching system, narrowed down to 
the operations of password issue, cryptooommunica- 
tion, and orderer certification, will be described. The 
steps in a press factory are nearly the 6ame as in Fig. 1, 
so the original disk 800 and the completed disk 809 are 
not shown. 

In a press factory 81 1. a cipher encoder 812 enci- 
phers the data in the plaintexts 81 0 of the first to the '1 - 
mth contents or scrambles the picture signals therein 
with the first to '1- m'th cipher keys 813, respectively. 
The data or the signals are then recorded on an original 
optical disk 800. Disk-lite substrates 809 are pressed 
from the original disk 800. After a reflecting film is 
formed on each substrate 809, the two disk-like sub- 
strates are laminated together. Thereafter a completed 
disk 809 is made. Recorded in the BCA areas 814 of 
completed disks 809 are cfifferent IDs 815 and/or first 
cipher keys 816 (pubfic keys) and/or second cpher keys 

817 (public keys) and second computer connection 
addresses 818 so as to mate disks 801 each with a 
BCA. The c6sks 801 are dstrfouted to users. 

The contents of these disks have been enciphered. 
Therefore, in order to reproduce the contents of each of 
the disks, It is necessary to get a password from a pass- 
word issue center, an electronic shop or a mall, by pay- 
ing a charge That procedure wiR be descrfred next 

In a user's first computer 909, if a reproducer 819 
reproduces a distributed disk 801 with a BCA. a BCA 
reproduction part 820 including a PE-RZ demodulation 
part reproduces the data of the ID 815, f irst cipher key 
816, second cipher key 817 and/or connection address 
818. In order to get a password, the connection address 

818 of the second computer 821a, which is the server of 
a password issue center 821, is accessed through a 
communication part 822 via the Internet or another net- 
work 823, and the ID is transmitted to the second com- 
puter 821a. 

Here, the cryptorommurecatim procedure will be 
described. The second computer 821a receives the ID 
815 from the user's reproducer 819. Then, the second 
computer or server 821a of the password issue center 
821, which is called a 'mall' or an 'electronic shop' has a 



cipher key database 824. This database contains a 
table of the secret keys which are the decoding keys 
corresponding to the disks' own IDs or the first cipher 
keys 816 of the IDs, that is the first decoding keys 825 

5 and the IDs. The server can therefore search for the first 
decoding key 825 based on the received ID. Thus cryp- 
tocommunication is completed from the f irst computer 
to the second computer 821a. In this case, if the first 
cipher key and f irst decoding key are common keys of a 

w common key cipher, not of an public key cipher, they are 
the same key. 

If the user wants to use part of the enciphered con- 
tents stored on the disk 801, which may be 1,000 in 
number, for example, the content number 826 of which 

is is YV, the user sends to the second computer 821a the 
cipher which is the content number 826, that is, n* enci- 
phered with the public key which is the first cipher key 
816 by the first cipher encoder 827 composed of public 
key cipher functions. The second computer 821a 

20 searches for the first decoding key 825 for decoding this 
cipher as stated above, ft is therefore possible securely 
to convert this cipher into plaintext Thus, the cipher pro- 
tects the privacy of the user's order data. 

In this case, a signature may be made by means of 

25 the secret key of the public key cipher as the first cipher 
key 816. This method is called 'digital signature*. For a 
detailed explanation of the operation of "digital signa- 
ture*, see, for example, Digital Signature of E-Mail 
Security by Bruce Schneider 1995*. 

30 Back to the ayptocommunication, the cipher is sent 
through the communication part 822 and network 823 to 
the first cipher decoder 827 of the password issue 
center 821. Thus the first cipher decoder 827 decodes 
the cipher by means of the first pair cipher key 825 pair- 

95 ing with the first cipher key 816. 

In this case, because only the one disk has the pub- 
lic key, it is possible to reject invalid orders from third 
parties' disks. In other words, because each disk can be 
certified, it is possble to certify the user who owns the 

40 disk, it is thus certified that the content number 'n* rep- 
resents a particular individual's order. It is therefore pos- 
sible to exclude invalid orders of third parties. 

If the pubfic key 816 is secret the method can tech- 
nically be used to send a credit card number, or other 

45 accounting data which requires high security. Generally 
shops called 'malls' however, do not settle users' 
accounting data electronically, because there is no 
guarantee of security. Only the accounting centers 828 
of credit card companies, banks and the like can deal 

so with users' financial data. Presently, security standards 
such as secure electronic transaction (SET) are being 
unified, so it is probable that Rivest, Shamir and Aclle- 
man (RSA) 1024 bit public key ciphers will be used and 
the encpherment of financial data will be possible. 

55 Next, the accounting data cryptocommunicatkxn 
procedure of the present invention will be shown. First, 
by using the second cipher key 817 of the public key 
cipher reproduced by the BCA reproduction part 820, 
the second cipher encoder 831 enciphers the account- 
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ing data 830 such as an individual's credit card number 
with a public key system cipher such as RSA. The enci- 
phered data is sent from the communication part 822 
through the second computer 821 to the cipher decoder 
832 of the third computer 828. In this case, if there is a 
need for digital signature, the secret key 829 is used as 
the second cipher key 81 7. 

Similar to the procedure for the cipher key of the 
second computer 821a of the password issue center 
821 , it is possible to search the cipher key database 
824a for the second decoding key 829 corresponding to 
the ID or the second cipher key 817. By using this 
decoding key 829, the second cipher decoder 832 can 
decode the enciphered accounting data. 

If a digital signature is made by the second cipher 
encoder 831 with the secret key 829, the user's signa- 
ture can be confirmed in the second cipher decoder 
832. The accounting center 828 can thus get the user's 
credit card number, bank card number, bank password, 
or other accounting data safety even via the Internet In 
open networks such as the Internet, security comes into 
question. By means of this system, however, it is possi- 
ble to make cryptocommunication or certification with- 
out fault, because the cipher key (public key) for 
cryptocommunication or the secret key for digital signa- 
ture has been recorded in the BCA. tt is therefore possi- 
ble to prevent third parties' unauthorized accounting 
and orders. In addition, because it is possible to use var- 
ious public keys for different disks, that is, different 
users, the confidentiality of communication is improved, 
and the possibility of users' accounting data leaking to 
third parties is reduced. 

Referring back to Fig. 6, the procedure for issuing a 
password and the procedure for unlatching with a pass- 
word win be explained. The password issue center 821 
includes a password generation part 834 with an opera- 
tion expression of public key ciphers etc. Part 834 gen- 
erates a password on the basis of three data fields, 
namely, the ID, the content number which the user 
wants to unlatch, and the time data representing the 
period of use allowed. The generated password is sent 
to the first computer 909. In the simplest structure 
example, tie second computer enciphers with the pub- 
lic key for the public key cipher the data which is a mix 
of the decoding key disk ID for releasing the cipher of 
the '1- nth content and the timing data, prepares at the 
password generation part 834 the '1- nth password 
834a which is a mix of secret keys for unlatching the 
enciphered data, and sends this password 834a to the 
first conputer 909. The first computer 909 receives the 
•1- nth password, and decodes with the secret key the 
mixed keys of the cfisk ID, the timing data and the f 1- nth 
content Here, the password operation part 836 checks 
the ID 835a of the BCA reproduced from the disk, the 
present second timing data 835b. the allowed ID 833a 
and the first timing data 833, and operates to determine 
If they coincide. If they do coincide, they are allowed. 
The 1- nth decoding key 836a is output to the cipher 
decoder 837. The cipher 837a of the '1- nth content is 



decoded. The '1- nth content 838 then is output The 
period of output is limited to the time during which the 
f irst timing data 833 and second timing data 835b coin- 
cide The password operation part 836 of the first com- 

5 puter 909 computes three data fields, which are the ID, 
the password 835 and the timing data from the clock 
836b representing the present time. If the ID and timing 
data are correct the correct decoding key is output as 
the result of the computation. Therefore, the cipher 

to decoder 837 decodes or descrambles the '1 - nth cipher, 
outputting the plaintext data of the '1- nth content 838, 
or a descrambled picture signal or audio signal. 

In this case, if the second timing data 835b of the 
clock 836b does not coincide with the first timing data 

75 838 of the password, the cipher is not correctly decoded 
and therefore not reproduced. If timing data is used, it 
can be applied to time-limit type rental systems, so that 
a movie can be reproduced for only three days during a 
rental period. 

20 While Fig. 6 shows the procedure in a block dia- 
gram, the flowcharts of the procedure wiP be explained 
later with reference to Figs. 16-23. 

Next, the system for the cipher key will be 
descrfoed. By putting, as shown in Fig. 7a, both the first 

25 cipher key 81 6 and second cipher key 81 7 in the BCA. it 
is possbfe to provide two securities, for a commodity 
deal with a shopping mall and an account settlement 
with an 'accounting center". 

In this case, with respect to the security with an 

30 accounting center, it is planned to unify standards such 
as SET, so that an RSA 1024, that is 128 byte cipher 
key, will be stored in the second cipher key area 817a. 
Then, because the BCA has only 188 bytes, only 60 
bytes remain for the cipher key for dealing with a shop- 

35 ping mall. An elliptic function system public key cipher is 
a cipher function which is 20 bytes in magnitude and 
which has a security level equal to that of 128 bytes of 
RSA 1024. 

An elliptic function is used in the first cipher key 

40 area 816a of the present invention. An elliptic function 
can obtain 20 byte security, which is equivalent to RSA 
1024. Therefore, by using an eQptic function, ft is possi- 
ble to store both the first cipher key 816 and second 
cipher key 817 in the 188 byte BCA area. 

45 By applying a BCA to an optical ROM cfisk, as 
stated before, ft is possible to record a disk's own ID 
number, the first and second cipher keys, and a connec- 
tion address. In this case, if the Internet is used, a mall 
is accessed automatically, and merely by distributing 

so disks with cipher keys recorded in the BCAs, security is 
possible for distribution of commodities by releasing the 
ciphers of contents, certif ication and keeping secret pur- 
chase of goods, certification and keeping secret when 
accounts are settled, and the ike. Therefore, the 

ss method of cryptocommunication of the present inven- 
tion can, without lowering security, omit and rationalize 
the conventional operations of using IC cards, floppy 
cfisks and/or letters to distribute IDs and/or cipher keys 
to users. This is a great advantage. Furthermore, a 
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URL, which is an Internet connection address, is not 
fixed, but changeable. The URL is recorded in the origi- 
nal disk, and may be accessed. It is, however, not effi- 
cient from the points of view of time and cost to vary the 
original cfisk when a URL change is made. By having 
recorded the changed URL in the BCA, and connecting 
the BCA connection address 931 instead of the connec- 
tion address of the original disk only if the connection 
address 931 is reproduced from the BCA, it is possible 
to access the changed address 931 without preparing a 
new original disk. 

Rg. 6 shows a case where the first key of the public 
key and the first key of the public key have been 
recorded in the BCA. 

Fig. 8 shows two diagrams, in one of which the first 
cipher key 816 of the public key and the third decoding 
key 817a of the secret key have been recorded in the 
BCA. In the other diagram, a cipher key is produced for 
cryptocommunication. Because the procedure is similar 
to that of Fig. 6. only different points will be described. 
First, in a press factory, the first cipher key 816 and third 
decoding key 817a are recorded in the BCA. The third 
decoding key 817a is used to receive the cipher enci- 
phered with the public key from an accounting center. In 
this case, the reception security is improved. 

First with reference to Fig. 8, a more specific exam- 
ple of cryptocommunication where a cipher key is gen- 
erated will be described. Because the first cipher key 
816 is a public key, it is necessary to record the third 
decocfing key 817a for reception in the BCA. But the 
BCA has a small capacity. In addition, the public key 
needs processing time. Therefore, in Fig. 8. the cipher 
key generation part 838a of the first computer 836 gen- 
erates a pair of a cipher key and a decoding key for the 
public key or a common key by means of a random 
number generator or the like. An example of the com- 
mon key will be described. A common key K 838 is enci- 
phered with the first cipher key 816 and first cipher 
encoder 842, and sent to the second computer 821a. 
The second computer uses the main decoding key 844 
to convert this cipher into plaintext by means of the main 
cipher decoder 843, obtaining a common key K 838a. 
Because both have the common key K, it is possfoie to 
make cryptocommurvcation from a shop to a user, that 
is. from the second computer 821a to the first computer 
836 by delivering the common key K to the second 
cipher encoder 842a and second cipher decoder 847a. 
Naturally, it is also possible to make cryptocommunica- 
tion from the user to the shop, that is, from the first com- 
puter 836 to the second computer 821a by delivering 
the common key K to the second cipher encoder 827a 
and second cipher decoder 845a. The effects of the 
method of recording in the BCA the first tipjher key 
which is a public toy and generating a cipher key will be 
stated. First, it is necessary only to record the first 
cipher key, so that the recording of the decoding key can 
be omitted. Therefore, the small capacity of the BCA is 
not reduced. Second, because the decoding key is 
recorded in the BCA, the security is improved. The com- 



mon key may be changed each time. 

Because of the short operation time, the processing 
time is short. In this case, if the cipher key generation 
part 838a has generated a pair of a cipher key and a 
5 decoding key of a public key cipher, not a common key, 
it is possible to make the security higher than that with 
the common key, though the processing lime is longer, 
by cryptically sending the cipher key to the second com- 
puter 821a, using this key as the cipher key of the see- 
to ond cipher encoder 842a, and using the decoding key 
as the decoding key of the second cipher decoder 847. 
If the performance of the processing CPU is high, it is 
preferable that the public key be used. If a new public 
key is generated, only the public key for the first cipher 
is key is recorded in the BCA so that no problems of secu- 
rity arise. No capacity of the BCA is consumed either. In 
addition, because it is not necessary to change the 
cipher key, maintenance is easy. 

This time, if the common key K 838 is defined at the 
20 second computer 821a of the password issue center 
821 , the common key is enciphered with the third cipher 
key 839 by the third cipher encoder 840, and sent to the 
personal computer 836. By using the third decoding key 
837 which is the secret key reproduced from the BCA, 
25 the third cipher decoder 841 of the personal computer 
836 makes a translation into plaintext to obtain a com- 
mon key K 838b. In this case, because only this user 
has the third decoding key 81 7a which is the secret key, 
it is possfcle to prevent the contents of communication 
so from the center to the user from leaking to third parties. 
The format of this case is shown in Fig. 7b. If an elliptic 
function is used, the third decoding key 839b may be 20 
bytes, and can therefore be stored in the BCA. 

Fig. 9 shows a system for reducing the costs of pre- 
ss paring an original disk by using a BCA in an encipher- 
merit disk. 

tf there is a number W of, for example, 1,000 plain- 
text contents 850, the cipher encoder 852 enciphers 
them with the first to the Wth cipher keys 851, respec- 

40 tively. The ciphered first to the Wth contents 853, the 
decoding program 854a for tfie first to Wth contents, : 
and the second cipher decoder 861a, which is the pro- 
gram for decoding the second cipher, are recorded as 
pits in an original disk and then molded into a substrate, 

45 and a reflecting film is formed. Thereafter, two sub- 
strates are laminated together to complete an optical 
disk 801. The second cipher encoder 860 enciphers the 
decoding data 854 such as the password for unlatching 
the '1 - nth, for example, the first content, and thedecod- 

50 ing key. Recorded in advance in the BCA of the first disk 
are the disk's own identification data, that is, the ID 855 
and the second cipher which is the enciphered decod- 
ing data. Then, in the reproducer, the second cipher is 
reproduced from the BCA reproduction part 820. The 

55 second cipher decoder 861 is reproduced from the data 
reproduction part 862, which reproduces the ordinary 
recorded data other than the BCA. Therefore, the sec- 
ond cipher decoder 861 is used to decode the second 
cipher, reproducing the ID 855a and *1- nth password 
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854a. The cipher decoder 855b uses the decoding pro- 
gram 854a tor the '1- nlh content reproduced from the 
data reproduction part 862, and uses the ID 855a and 
password 854a to decode the first cipher, obtaining the 
plaintext 855c of the '1 - nlh content and the identifica- 
tion data 855a. For a personal computer, the content 
and ID are recorded on the hard disk 863. This ID 855a 
checks to determine if there is no same ID on a network 
when the program has started, and the ID 855a actu- 
ates the network protection. It is therefore possible to 
prevent the software from being illegally installed. This 
is yet another advantage of the present invention. For 
example, if 1,000 enciphered contents are stored and 
decoding data such as a password corresponding to a 
particular software application are recorded on an origi- 
nal disk, this is equivalent in substance to the prepara- 
tion of an optical ROM disk for a particular content, ft is 
possible to obtain with one original disk the same effect 
as in the case where original disks for 1,000 Wnds of 
software are cut It is therefore possible to reduce the 
costs and time or labor for preparing an original disk. 

Descrfced with reference to Fig. 10 is the procedure 
for enciphering contents with a BCA when recording 
them on a RAM disk. First, the BCA reproduction part 
820 reproduces the BCA data from the RAM disk 856. 
outputs an ID 857, and sends it through the interfaces 
858a and 858b and the network to the encipherment 
part 859. The cipher encoder 861 of the encipherment 
part 859 enciphers contents 860 or scrambles picture 
and sound signals by means of a key including the ID 
857. The enciphered contents are sent to the 
recorder/reproducer, where the recording circuit 862 
records them on the RAM disk 856. 

Next, when this signal is reproduced, the data 
reproduction part 865 demodulates the main data to 
reproduce the enciphered signal, and the cipher 
decoder 863 decodes the reproduced signal. The BCA 
reproduction part 820 reproduces data containing the 
ID 857 from the BCA area of the RAM disk 856. The 
reproduced data is sent as part of the key to the cipher 
decoder 863. If normally copied, the cipher key 
recorded in the RAM disk is a normal disk ID. The RAM 
disk ID, ateo, is a normal disk ID. Therefore, the cipher is 
decoded or descrambled to output the plaintext 864 of 
the '1- nth content For a graphic data, for example, the 
MPEQ signal is extended to obtain a picture signal. 

In this case, the disk ID is the key for encipherment 
Because each disk is unique, it can be copied on only 
one RAM disk 

H a disk ID is copied from a normal RAM disk to 
another RAM disk, ID1 which is the original normal disk 
ID differs from ID2 which is the disk ID of the other, 
unauthorized, RAM disk. If the BCA of the unauthorized 
RAM disk is reproduced, ID2 is reproduced. The con- 
tents are ciphered with ID1, however, so that even if 
unlatching is attempted with ID2 at the cipher decoder 
863, the cipher is not decoded because the key differs. 
Thus, the signal of the illegally copied RAM disk is not 
output, so that the copyright is protected. The present 



invention uses a disk ID system. Therefore, by repro- 
ducing with any drive the normal RAM disk copied nor- 
mally only once, it is possible to unlatch the cipher. The 
encipherment part 859 may, in place of the center, be an 

5 IC card with a cipher encoder. 

With reference to the block diagram of Fig. 1 1 and 
the flowchart of Fig. 12, the method of preventing copy- 
ing will be described. At Step 877a, the installation pro- 
gram is actuated. At Step 877b, the BCA reproduction 

10 part 820 outputs the ID of the auxiliary data from the 
laminated optical disk 801. At Step 877d. the data 
reproduction part 865 reproduces the contents and net- 
work check software 870 from the main data. The con- 
tents and the ID 857 are recorded on the HDD 872. At 

is Step 877c, the ID 857 is encoded with a particular 
secret cipher so as not to be altered illegally, and is 
recorded as a soft ID in the HDD 857. Thus, the soft ID 
873 is recorded together with the contents on the HDD 

872 of a personal computer 876. Here described is the 
so case where the program is started at Step 877f of Fig. 

1 2. When the program is started, the procedure goes to 
Step 877g, where the soft ID 873 of the HDD 872 is 
reproduced, and the soft ID 873a in the HDD 872a of 
another personal computer 876a on a network 876 is 

25 checked through the interface 875. At Step 877h, a 
check is made to judge if the soft ID 873a of the other 
personal computer and the soft ID 873 are the same 
number. If so, the procedure goes to Step 877j, where 
the start of the program of the personal computer 876 is 

so stopped or a warning message is displayed on the 
screen. 

If the soft ID 873a of the other personal computer 
and the soft ID 873 are different the contents are not 
installed in the plurality of the computers on the net- 
as work. It is tfierefore decided that there are no Blegal cop- 
ies. Then the procedure goes to Step 877k, where the 
start of the program is permitted. In this case, the soft ID 

873 may be sent to other personal computers through 
the network. This personal computer can detect iSegal 

40 installation by checking duplication of the soft IDs of the 
personal computers. If there is illegal Installation, a 
warning message is sent to the appropriate personal 
computer/s. 

Thus, by record ng the ID in the BCA, and recoiding 
45 the networfc check program in the pit recording area, it is 
possible to prevent multiple installation of the software 
off the same ID on the same network. In this way, simple 
protection from iOegat copies is realized. 

By, as shown in Fig. 13a, applying a write (writing) 
so layer 850 of white material, on which characters or the 
like can be written, it is possible to not only print charac- 
ters and write a password or the like with a pen, but ateo 
prevent the substrates of the optical disk from being 
damaged because the write layer 850 thickens. The 
55 cfisk ID 81 5, which is part of the BCA data 849 recorded 
by trimming in the BCA area 801a above the write layer 
850, is translated into plaintext The plaintext is con- 
verted into alphanumeric characters 851. By printing 
the characters 851 and general bar code 852, it is pos- 
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stole for the store and/or user to confirm and/or check 
the ID with a POS bar code reader and/or visually, with- 
out reading the BCA with a reproducer. The visible ID is 
not necessary if the user informs the center of the ID 
through a personal computer. If, however, the user com- 5 
municates the ID aurally by telephone to the center, it is 
possible to inform the center of the ID without inserting 
the disk in a personal computer, by printing the ID iden- 
tical with the BCA ID in visible form on the disk, because 
the user can visually read the ID. With reference to the 10 
flowchart of Fig. 13c, the steps for making an optical 
disk will be explained. At Step 853d, disks are molded 
from an original disk, and substrates in which pits have 
been recorded are made. At Step 853e, aluminum 
reflection films are made. At Step 853f, two disk sub- 15 
strates are laminated with an adhesive so that a DVD 
disk or the like is completed. At Step 853g, a label is 
printed by screen printing on one side of each disk. At 
this step, the original disk's own identification data is 
recorded in the form of a bar code. At Step 853h, an ID 20 
and/or other identification information is printed in the 
format of a bar code for POS on each disk by an ink jet 
bar code printer or a thermal-transcription bar code 
printer or the like. At Step 853i, the barcode is read by 
a bar code reader. At Step 853j, a BCA data corre- 25 
sporting to the identification data is recorded in the 
second recorcfing area of the disk According to this 
method of manufacturing, the BCA data is recorded 
after an the steps including the POS bar code and 
exclucfing the BCA are finished and then the disk identi- 30 
f ication data is confirmed. The BCA can be read only by 
reproducing the disk, but the POS bar code, which is 
low in density, can be read by a commercial bar code 
reader. The disk ID can be discriminated at every step in 
the factory. By recorcfing the disk ID in the form of a POS 35 
bar code before the BCA trimming, it is possible to 
almost conrpletely prevent the BCA and the POS bar 
code from being illegally recorded. 

The method of using a BCA will be stated by which 
secondary recording and tertiary recording, too, can be 40 
made by the BCA method. As shown at Process 2 in 
Fig. 15, a software maker can also secondarily record a 
pirated edition prevention mark and a check cipher. At 
Process 2. disks 944b may be made in which different 
ID numbers and/or cipher keys for secret communica- 45 
tion with users have been recorded. It is possible to 
replay the disks 944c and 944d without entering the 
passwords. 

For another application, at Process 3, an enci- 
phered or scrambled MPEG picture signal and/or other so 
data is recorded on a disk 944e The operation of the 
MPEG scramble will not be explained in detail. At Proc- 
ess 4, the software company makes a disk 844f in which 
a sub-public key for decoding the ID number and the 
scramble release data have been BCA-reconded sec- ss 
ondarily. ft Is not possible to replay this disk solely. At 
Process 5, the selling store, after receiving the money 
for the disk, mates a password with the sub-secret key 
paired with the sub-public key, and records it tertiarily on 



the disk. Alternatively, a receipt on which the password 
has been printed is given to the user. Thereafter, the 
password has been recorded in the disk 844g, so that 
the user can replay it. This method prevents a disk not 
paid for from being replayed normally, even if the disk is 
shoplifted, because the scramble of the image is not 
released. As a result, shoplifting renders a useless 
product and thus decreases. 

If a password is BCA-recorded permanently in a 
rental video store or another store, a shoplifted disk can 
be used. In this case, as shown at Process 6, the BCA 
is read by a POS bar code reader in the store. A pass- 
word for releasing the scramble is issued at Step 951 g. 
printed on the receipt at Step 951 i, and handed to the 
customer at Step 951j. The customer enters, at Step 
951k, the password on the receipt in a player with 
numeric keys at his/her house. At Step 951 p, the disk is 
replayed for a predetermined number of days. If a user 
rents a disk, given a password for only part of the soft- 
ware in the disk, and when he/she wants to view other 
part of the software, he/she can replay it by being 
informed of the password for this part by telephone at 
Step 951 u, and entering the password at Step 951k. A 
rental video store has been shown as an example. 
When a piece of enciphered software for a personal 
computer is sold at a personal computer software store, 
the password may be printed by a POS terminal and 
handed to the buyer. 

The operations of Processes 5 and 6 in Fig. 15 at a 
selling or rental store will be explained in more detail 
with reference to Fig. 14. A selling store receives an 
enciphered and/or scrambled disk 944f from the soft- 
ware maker. After the store confirms its receipt of 
money from a user, it sends from its bar code recorder 
945 the ID number of the disk 944f and the data on the 
sub-public key via Hs POS terminal 946 to the password 
issue center 952. For a small-scale system, the pass- 
word issue center, that is, the system including the sub- 
secret key of the sub-pubGc key may exist in the POS 
terminal. The password issue center inputs the cfisk ID 
number and the time data at Step 951 q, computes them 
at Step 951s, enciphers them with the sub-secret key at 
Step 951t issues a password at Step 951g, and sends 
it through the network 948 and POS terminal 846 to the 
BCA bar code recorder 945. Then the recorded disk 
944g is handed to the customer. The disk 944g can be 
replayed as it is. 

For rental stores and personal computer software 
stores, ROM disks 944f the ciphers and/or scrambles of 
which have not been released are displayed in stores. If 
a customer designates a particular ROM disk 944f . the 
bar code of the reflection layer by the non-reflection part 
915 of the disk 944f is read, so that the disk ID number 
is read, by a person holding a circular bar code reader 
950 with an integrated rotary optical head 953 for spi- 
rally scanning, and pressing it on the center of disk 900 
in a transparent case. By printing the commodity bar 
code of the disk ID as shewn at 852 in Ftg. 13, it is pos- 
sible to read the code with an ordinary POS terminal bar 
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code reader. Alternatively, the pressed circular bar code 
recorded in advance on the original disk may be read. 
These data including the disk ID are processed by the 
POS terminal 946. The charge is settled by credit card. 
The password issue center issues, at Step 951 g, a 
password associated with the ID number as stated 
above. For rental use, a password is made by encipher- 
ing the disk ID number with date data added as used at 
Step 951 r in order to limit the number of days for which 
the disk can be replayed. For this password, the disk 
can operate on only particular days. It is therefore pos- 
sfele to set a rental period, which may be three days, for 
instance, in the password. 

The thus issued password for descrambling is 
printed at Step 951 i together with the date of rent, the 
date of return and the rental title charge on the receipt 
949, and handed with the disk to the customer. The cus- 
tomer takes the disk 944j and receipt 949 home. At step 
951k, the customer enters the password with the ten- 
key input part 954 of the first computer 909 in Fig. 6, so 
that the password 835 is computed with the ID number 
835a and input into the cipher decoder 837. Then, the 
password is converted into plaintext by means of the 
decoding key. Only *rf the password is correct, will the 
cipher decoder 837 descrarhble the program data and 
supply image output. 

In this case, if the password includes time data, the 
data is checked with the date data of the dock part 
836b The password is descrambled for the coincident 
dates. The inputted password is stored together with the 
associated ID number in the nonvolatile memory 755a 
of the memory 755. Once the user enters the password, 
it is descrambled without being entered again. It is thus 
possible to lock and unlock the disk electronically in dis- 
tribution. 

With reference to Fig. 16, the method of decoding 
the software of a disk which has been recorded as 
cipher data win be explained in detail 

Step (Process) 865 represents the overall flow of 
distribution of cipher data and indrvkJual IDs to users. 
First, at Step 865a. a number w of data enciphered 
with the secret first cipher key and a program for decod- 
ing the enciphered data are recorded in the ROM area 
of an original disk. At Step 865b. substrates are molded 
from the original disk, and then tie substrates with 
reflection films added thereto are laminated in pairs to 
make completed ROM disks. At Step 865c, the decod- 
ing data (the disk identification data different for the 
pressed disks, respectively, and/or the decoding key for 
the cipher data) necessary to decode the enciphered 
data is recorded in the auxiliary recording area (called 
BCA), which cannot be rewritten, of each completed 
disk by a method of modulation different from that for 
the ROM area At Step 865d. a user replays the distrib- 
uted risk, selects a desired enciphered data 'n\ and 
starts the decoding process. At Step 865e, the user's 
first computer reproduces the enciphered data and the 
decocfing program from the ROM area, and reads the 
decoding data from the auxiliary recording area (BCA). 



If, at Step 865f, the second decoding data is not 
obtained on-line, then, at Step 871a of Fig. 17, the ID 
and/or other auxiliary decoding data are displayed on 
the screen. At Step 871b, the user obtains the second 

5 decoding data such as the password associated with 
the ID, and enters it into the first computer. Carried out 
at Step 87lc is a particular operation of an open-key 
cipher function with the disk identification data, the sec- 
ond decoding data, and the enciphered data W If, at 

10 Step 871d, the result is correct, then, at Step 871f, the 
f 1- nth data is translated into plaintext, so that the user 
can mate the software of the data YV operate. 

Next, with reference to the flowchart of Fig. 18, the 
method of cryptocommunication essential to the Inter- 
is net and/or the like using a BCA will be described. Step 
(Process) 868 is the routine of the method of distributing 
the communication program and cipher key for commu- 
nication to users. First, at Step 868a, at least the com- 
munication program and/or connection data are 

20 recorded in the ROM area of an original disk. At Step 
868b, substrates are molded from tie original cfisK and 
the substrates are laminated in pairs to mate completed 
ROM disks. At Step 868c, the disk identification data dif- 
ferent for the pressed disks, respectively, and the cipher 

25 key for cryptocommunication are recorded in the non- 
rewritable auxiliary recording area (BCA) of each com- 
pleted disk. According to circumstances, the connection 
address of the second computer and/or the decoding 
key for cryptocorrmujnication is recorded by a method of 

30 modulation different from that for the ROM area. At Step 
868d, the user's first computer reproduces the commu- 
nication program and the decoding program from the 
ROM area, and reads the disk identification data and 
the cipher key for communication from the auxiliary 

55 recording area. The process continues at Fig. 19. At 
Step 867a, it is judged if there is a connection address 
in the BCA area. If yes, the second computer is 
accessed, at Step 867b, on the basis of the connection 
address such as the BCA area URL If there is no con- 

40 nection address, the computer of the connection 
address In the ROM area is accessed at Step 867c. At 
Step 867d, the transmit data Is Input At Step 867e, it is 
judged if there is a cipher key for cryptoconmwication 
in the BCA area If so, the transmit data is enciphered, 

45 at step 867g, with the cipher key for cryptocommunica- 
tion in the BCA area to make a third cipher, ff not, the 
data is enciphered, at step 867f, with the cipher key for 
cryptocommunication in the ROM area or HDD to make 
a third cipher. 

so In Fig. 20, Step (Process) 869 represents the rou- 
tine of generating a decocfing key for the cipher received 
from the second computer 910. First, at Step 869a, the 
first computer judges if a decoding key for communica- 
tion is necessary. If necessary, the process goes to Step 

55 869b, where a check is made to judge if there is a 
decoding key for communication in the BCA. If there is 
no decoding key. the process goes to Step 869c. where 
a pair of second cipher toy for communication and sec- 
ond decoding key for communication is generated newly 
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with the program for generating the cipher key/decoding 
key reproduced from the ROM area, by the user keying 
or with data from a random number generator and the 
second encoder reproduced from the ROM area. At 
Step 869d, a fourth cipher is made which is the second 
cipher key for communication and/or the user data enci- 
phered with the cipher key tor communication recorded 
in the BCA and the encipherment software reproduced 
from the ROM area. At Step 869e, the fourth cipher and 
the disk identification data and/or the user address are 
sent to the second computer of the connection address 
reproduced from the disk. The process of the second 
conputer includes Step 869f, where the fourth cipher, 
the disk identification data and the user address are 
received. At Step 869g, the decoding key for communi- 
cation paired with the disk identification data is selected 
from the decoding key data base, and the fourth cipher 
is decoded with the selected key to obtain the plaintext 
of the second cipher key for communication. At Step 
869h, the fifth cipher which is the server data including 
part of the user data and enciphered with the second 
cipher key for communication is sent through the Inter- 
net 908 to the first computer. At Step 869i. the fifth 
cipher (and disk identification data) is (are) received, 
and decoded with the second decoding key for commu- 
nication and the decoding function recorded in the ROM 
area to obtain the plaintext of the server data In this 
way, the method of Step 869 in Fig. 20 reafizes two-way 
cryptocommuracation between the first and second 
computers. 

In Fig. 21, Step (Process) 870 represents the rou- 
tine of receiving accounting data If, at Step 870a, the 
accounting data is input, the third cipher key of the pub- 
Ik: key cipher for accounting communication is 
requested from the second computer. At Step 870b, the 
second computer requests the third cipher key from the 
third computer. The third computer 911 sends the ID 
and third cipher key to the second computer, though the 
exchange step is omitted. At Step 870c, the second 
computer receives the ID and third cipher key. At Step 
870e, the seventh cipher which is the third cipher key 
enciphered with the second cipher key for communica- 
tion and/or the Oke is sent to the first computer. The first 
computer receives the seventh cipher at Step 8701 At 
Step 870g, the received seventh cipher is decoded with 
the second decoting key for communication so as to 
obtain the third cipher key (public key of public key func- 
tion). At Step 870h, the third cipher key is recorded on 
the HDD according to circumstances. This is used for 
the next transmission. At Step 870i, it is judged if a 
credit card number, a password for settlement and/or 
other secret accounting data are input At Step 870j, the 
eighth cipher which is the accounting data enciphered 
with the friird cfcher key is sent via the second computer 
to the third computer. At Step 870k. the second compu- 
ter receives the eighth cipher and transfers it again to 
the third computer. Only the third computer 912, which 
is, for example, at a banking institution, has the decod- 
ing key for the ttiird cipher, so that the second computer, 



which is an electronic store, cannot decode it. At Step 
870m, the third computer determines from the cipher 
key data base the third decoding key associated with 
the third cipher key by using identification data on the 

5 disk and/or the lite, and decodes the eighth cipher with 
the third decoding key, which is the secret key of the 
public key cipher, so as to obtain the plaintext of the 
accounting data. At Step 870n, a check is made to 
judge from the users credit data, deposit remains 

10 and/or other banking data whether the money can be 
received. At Step 870p, the third conputer informs the 
second computer of the result of the search. The sec- 
ond computer, which is an electronic store, judges at 
Step 870q if the money can be received. If not, the proc- 

/5 ess goes to Step 870r, where the article and/or the key 
for decoding the cipher software is not sent If the 
money can be received, for a key provision system as 
shown in Rg. 16, the process goes to Step 870s, where 
the cipher software decoding key, that is, the article is 

20 sent via Internet 908 to the user's second computer. At 
Step 870t, the first computer receives the cipher soft- 
ware decoding key. At Step 870u, the cipher of the '1- 
nlh enciphered software is released. At Step 870w, the 
plaintext of the software is obtained. In this way, a con- 

2s tent key provision system is realized. 

The method of Step 870 in Fig. 21 requests the 
third computer, that is, a banking institution to issue 
according to the need a public key for the third cipher 
key. which needs high security for accounting data. It is 

30 not necessary to record the public key in the BCA in 
advance. It is therefore possfcle to use for the third 
cipher key a stronger RSA system cipher key of 256 
bytes of RSA2048 without consuming the BCA capacity. 
Further, because there is no need for recording in the 

35 BCAs of all disks in advance, the total of the issued third 
cipher keys decreases, and the computer CPU time 
taken to compute the third dpher keys decreases. In 
addition, because the third ciphers do not exist in the 
BCAs, they are not opened, so thai the security is 

40 improved. In this case, the role of the BCA is, as shown 
in Figs. 19 and 20, to record the identification data of a 
secret communication disk by means of the cipher key 
of the RSA1024 grade. Only one BCA disk reafizes 
cryptocommurucation with the second computer, so that 

45 the effect is high. 

With reference to Fig. 22, Step (Process) 872 of 
cryptocommunication in a case where the cipher key 
and the decoding key both for communication have 
been recorded in the BCA will be described. At Step 

so 872g, the first computer 909 sends to the second com- 
puter 910 the ninth dpher which is the user data enci- 
phered with the cipher key for communication 
reproduced from the BCA, the basic identification data 
recorded in the ROM area when the original disk was 

55 made, and the cfisk identification data recorded in the 
BCA area. At Step 872b, the second computer receives 
the ninth cipher, the disk identification data and the 
baste identif ication data. At Step 872c, the decoding key 
for communication paired with the disk identification 
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data from the decoding key data base is retrieved, and 
the ninth cipher is decoded to obtain the plaintext of the 
user data. At Step 872e, the second cipher key associ- 
ated with the disk identification data is selected from the 
cipher key data base. In addition, the second computer 
sends to the first computer the tenth cipher which is the 
server data enciphered with this second cipher and the 
third cipher key received from the third computer by the 
procedure described in Fig. 21 and enciphered with the 
second cipher. The first computer receives the tenth 
cipher at Step 872f. At Step 872g f the received seventh 
cipher is decoded with the second decoding key for 
communication recorded in the BCA, to obtain the plain- 
text of the server data and the third cipher key (public 
toy of the public key function). At Step 872h, according 
to the need, the third cipher key is recorded on the HOD. 
At Step 872i, it is judged if the accounting data is input 
If so, the process goes to Step 872j, where the eleventh 
cipher which is the accounting data enciphered with the 
third cipher key is sent via the second computer to the 
third computer. At Step 872m. the second computer 
sends the eleventh cipher again to the third computer. 
At Step 872m, the third computer determines from the 
third cipher key data base, the third cipher key paired 
with the identification data on the disk and/or the like, 
and decodes the eleventh cipher to obtain the plaintext 
of the accounting data. At Step 872n, the possibility that 
the money can be received from the user is checked. At 
Step 872p, the result of the search is sent to the second 
computer. At Step 872q, the second computer checks to 
judge if the money can be received from the user. If so, 
for a key provision system as shown in Fig. 1 6, the proc- 
ess goes to Step 872s, where the cipher software 
decocfing key, that is, an article is sent via me Internet to 
the user's second computer. At Step 872t the first com- 
puter receives the cipher software decoding key. At Step 
872u, the cipher of the 1- nth enciphered software Is 
released. At Step 872w, the plaintext of the software is 
obtained. In this way, a content key provision system is 
realized. 

The merit of the effect of the method of Step 872 In 
Fig. 22 is that, because both the cipher key and the 
decocfing key are recorded in the BCA area, it is not 
necessary to transmit the decoding key and/or the 
cipher key necessary for reception from the second 
computer. The maximum BCA capacity is 188 bytes. A 
public key and/or another cipher function needs only 
128 bytes, and can therefore be recorded. Further, it is 
possible to bidirectionalty encipher the grade in 
RSA512. Because seven or eight elliptic functions can, 
as shown in Fig. 7, be stored, elliptic functions are more 
effective. 

With reference to Fig. 23, the operation and effect in 
a case where the first and third cipher keys have been 
recorded in the BCA in advance will be explained. 
Because Steps 872a through 872w in Fig. 22 are nearly 
identical with Steps 873a through 873w In Fig. 23, only 
the cfifferent steps will be explained. 

The third cipher key for protecting the security for 



accounting data and/or other banking data has been 
recorded in the BCA Therefore, at Step 873e, the sec- 
ond and third computers do not need to generate and 
send the third cipher key. At Steps 873e, 873f and 873g t 

5 the twelfth cipher is sent and received. At Step 873j, the 
third cipher key is read from the BCA area, and the 
user's accounting data is sent via the second computer 
to the third computer. The method of Fig. 23 does not 
need the third cipher key generated, sent and received 

10 at all, so that the procedure is simple. 

In the case of electronic settlement systems, in 
general, there are a plurality of accounting centers rep- 
resentative of credit companies. Therefore, naturally, 
there is a need for a plurality of third cipher keys, which 

is are public keys. As explained with reference to Fig. 7b, 
there is a need for an RSA1024 grade or more, that is, 
128 bytes or more if an RSA cipher function is used. 
The third cipher key 817b can therefore enter only one 
place of 188 bytes of the BCA. However, elliptic-function 

so cipher keys (elliptic ciphers) which have appeared in 
recent years give, with small capacity, security equiva- 
lent to that of RSA In recent years, RSA function 
RSA1024 has been the lowest standard of banking data 
security. While an RSA function needs 128 bytes, it is 

25 said that an elliptic cipher needs only about 20 through 
22 bytes for equivalent security. Therefore, as shown in 
Fig. 7c, it is possible to store in the BCA seven, eight or 
fewer third ciphers which deal with banking data. The 
use of elliptic functions realizes a BCA-application elec- 

30 trortic settlement system which can deal with a plurality 
of essential banking centers. Explanation has been 
made, concentrated on the third cipher, but even if an 
elliptic cipher is used for the pubfic key for the f irst cipher 
key, its effect is similar because high security is kept in 

35 relation to a plurality of electronic stores. 

With reference to Fig. 24, the RAM disk 
recorder/reproducer with a BCA explained with refer- 
ence to Fig. 10 will be descrfoed in more detail. As an 
embodiment the procedure for recording in a RAM disk 

40 in a so-called pay-per-view system will be described. 
First, with its program transmitter 883 , a CATV company 
or another software company enciphers movie software 
or other contents 880 by using the first cipher key 882 in 
the first encoder to generate a first cipher 900, and 

45 sends this cipher to a decoder 886 such as each user's 
CATV decoder. If the decoder 886 sends a request for a 
particular program through a network to a key issue 
center 884, the center sends the first decoding data 
885a to the first decoding part 887 of the first decoder 

so 886. The first decoding data 885a is a particular piece of 
software such as the scramble release key for the par- 
ticular decoder system ID number and particular timing 
data 903. and includes a recording permission card 901 
for a RAM disk. The first decoding part 887 decodes the 

55 first cipher 900 with the system ID 888 and first decod- 
ing data 885a. In the case of a picture signal, the signal 
descrambled once and scrambled further with another 
cipher to protect the signal from being copied is output 
from the third cipher output part 889. The picture can be 
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viewed and listened to on a general TV 899, though the 
original signal is guarded from being copied. If the 
recording permission code 901 a is NO, it is not possible 
to record in a RAM disk 894. If OK, however, it is possi- 
ble to record in only one RAM disk 894. This method will 
be explained. 

In the decoder 886, an IC card 902 is inserted, and 
the BCA reproduction part 895 reads the BCA of the 
RAM disk 894 in a RAM recorder. Then the disk ID 905 
is sent to the IC card 902. The IC card 902 checks the 
recording permission code 901a and the present time 
data 904 obtained from the disk IC 905 and the decoder 
886. and makes a two-way hand-shake type copy check 
907 with the third cipher output part 889. If the recording 
permission code and copy checks are OK, the second 
auxiliary encoder 891 in the IC card 902 issues a sec- 
ond cipher key 906. The second encoder 890 enciphers 
the third cipher again to generate a second cipher, 
which is the contents 880 enciphered with the disk ID of 
a particular cGsk. The second cipher is sent to the RAM 
recorder 892, where it is 8-15 or 8-16 modulated by the 
first modulation part in the recording means 893. The 
second cipher 912 is recorded in the first recording area 
894a of the RAM disk 894 by means of a laser. In this 
way, the data of the RAM disk 894 is enciphered with 
the particular disk ID number. 

When the reproduction signals in this disk are 8-1 6 
demodulated by the first modulation 896a using a nor- 
mal reproduction means 896, the second cipher of the 
contents is output The second decoder 897 has second 
decoding keys 898a, 898b and 898c, which correspond 
to the cipher keys of the IC cards different for CATV sta- 
tions or other program supply companies, respectively. 
In thus case, the decoding key identification data of the 
decoder 868 or IC card 886 has been recorded in the 
first recording area 894a. The reproducer reads the 
decocfing key identification data 913 from the first 
recorcfing area 894a. The decoding key selection 
means 914 automaticaly selects out of the decocfing 
keys 898a through 898z the second decocfing key 898a 
corresponding to each cipher key. With the disk ID 905a 
as a key, the second decoder 897 decodes the second 
cipher. An IC card having a particular decoding toy 
might be used. In the case of an image, it is possible to 
obtain a normal image descrambted at a TV 899a. 

In the system of Fig. 24, acfisk ID 905 is sent to the 
IC card inserted into the decoder in each user's home to 
encipher picture image data and/or the like. It is there- 
fore not necessary for the software company 883 to indi- 
vidually change the cipher of the contents for 
distribution to users. Consequently, when broadcasting 
scrambled pay-per-view images to a great number of 
viewers as is the case with satellite broadcasting and 
CATV, it is possfcle to permrt recording in only one RAM 
disk per user. 

If, at the same time when recording is made in a 
disk in the system of Fig. 24, an attempt is made to ille- 
gally copy, that is, record in a second disk, that is, a 
RAM disk of another disk ID, it is not possible to after the 



disk ID because two-layer disks are used for BCAs. 
Therefore, unauthorized copying in the second disk at 
the same time is prevented. It can be considered that 
during another time period, a simulated or dummy 

5 recording permission code 901 a and/or a third cipher is 
sent to the decoder and/or IC card and data is recorded 
in a RAM disk of another disk ID. Even against such 
unauthorized practice, the decoder tone data control 
part 902 in the IC card compares the time of the timing 

to data 903 of the key issue center 884 and/or the time of 
the time data of the contents and the present time of the 
time data part 904a in the decoder to judge if they coin- 
cide. If so (OK), the IC card 902 permits the encipher- 
ment of the second cipher computing unit 990. 

15 tn this case, a hand-shake type time check method 
might be used which makes the second encoder 890 
and first decoder 887 exchange check data bidirection- 
ally. 

In the case of the hand-shake type, the second 

so cipher computing unit 890 including the IC card, the first 
decoding part 887, and the third cipher part 889 confirm 
the cipher data bidirectionally. This prevents the unau- 
thorized copying during the other time periods outside 
the time when the contents are sent. 

25 In this way, in each user's decoder 886, the soft- 
ware company's contents are recorded in only one RAM 
disk 894 for each particular disk ID. This disk can be 
reproduced by any RAM disk reproducer. Even in the 
case of recording in a RAM disk by the method of Fig. 

30 24, the software company's oopyright is protected. 
AJthoughthe enctpherment and decoding have been 
explained with reference to the cipher encoders and 
cipher decoders, respectively, in the detailed description 
of the drawings, the cipher algorithm and the decoding 

35 algorithm are practically used with programs in a CPU. 

INDUSTRIAL APPLICABILITY 

By thus recording in advance the cipher key and/or 
40 the decoding key for an ID and/or a cipher in the BCA 
area of an optical disk, it is possible to release the 
cipher of enciphered contents by a simpler procedure. 
In addition, the secrecy of communication is realized 
without a conventional procedure tor registration. By 
45 storing a network check program in contents, it is possi- 
ble to prevent pieces of software of the same ID on the 
same network being installed. Thus, there are various 
effects on the improvement of security. 
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Claims 





1. An optical disk including a first recording area, 
where main data are recorded in the form of pits, by 
a first method of modulation, and a second record- 

25 ing area which is a predetermined area in the first 
recording area, where a plurality of radially long 
parts of a reflection film are removed partially, so 
that auxiliary data are recorded by a second 
method of modulation, which differs from the first 

30 method, the optical disk being characterized by: 

the auxiliary data including a first identification 
data recorded therein for identifying individual 
optical disks; and 
as the main data including an impermissible part 

recorded therein which can be used with the 
first identification data and/or a specified pass- 
word. 

40 2. The optical disk descrfced in Claim 1, and further 
characterized in that it is a read only type optical 
disk. 

3. The optical disk described in Claim 1 or 2, and fur- 
45 ther characterized by a specified password being 

obtained through a specified operation with the first 
identif ication data 

4. The optical disk described in Claim 1 or 2, wherein, 
so in addition to the first identification data for identify- 
ing individual optical disks, a cipher key for a cipher 
and/or a decoding key for a cipher is recorded in the 
auxiliary data. 

55 5. The optical disk described in Claim 1 or 2, and fur- 
ther characterized by the first method of modulation 
being a method of 8-16 modulation, and the second 
method of modulation being a method of phase 
encoding modulation. 
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6. A method of permitting the use of a program, the 
method being characterized in that it comprises the 
steps of: 

reproducing an optical disk including a first 
recording area, where main data are recorded 
in the form of pits, by a first method of modula- 
tion, and a second recoiling area which is a 
predetermined area in the first recording area, 
where a plurality of radially long parts of a 
reflection film are removed partially, so that 
auxiliary data are recorded by a second 
method of modulation, which differs from the 
first method, the auxiliary data including a first 
identification data recorded therein for identify- 
ing individual optical disks and a cipher key for 
a cipher and/or a decoding key for a cipher, the 
main data including an impermissible part 
recorded therein which can be used with the 
first identification data and/or a specified pass- 
word; 

reproducing the first identification data from the 
auxiliary data; and 

enabling the impermissible part to be used and 
outputting it with the first identification data 
and/or the specified password. 

7. The method of permitting the use of a program 
described in Claim 6, and further characterized by 
the specified password being obtained through a 
specified operation with the first identification data. 

8. A method of cryptocomrrujnication characterized in 
that it comprises the steps of: 

reproducing in a first computer an optical disk 
including a first recording area, where main 
data are recorded in the form of pits, by a first 
method of modulation, and a second recording 
area which is a predetermined area in the first 
recording area, where a plurality of radiafiy long 
parts of a reflection fim are removed partially, 
so that auxiliary data are recorded by a second 
method of modulation, which differs from the 
first method, the auxiliary data including a first 
identification data recorded therein for identify- 
ing individual optical disks and a first cipher key 
for a cipher and/or a decoding key for a cipher; 
reading the first identification data and the first 
cipher key from the auxiliary data; 
obtaining a first cipher which is a first data enci- 
phered with the first cipher key and cipher algo- 
rithm; and 

sending the first cipher from a communication 
means of the first computer through a network 
to a second computer. 

9. The method of (^tocommunication described in 
Claim 8, and further characterized by the cipher 



algorithm bang read from the main data. 

10. A method of cryptocommunication characterized in 
that it comprises the steps of: 

5 

reproducing main data from a first recording 
area of an optical disk in a first computer; 
reproducing auxiliary data from a second 
recording area, the auxiliary data including a 

10 first identification data for identifying individual 

optical disks and a first cipher key for a cipher 
and/or a decoding key for a cipher; 
enciphering a first data in the first computer 
with the first cipher key in the auxiliary data by 

is cipher algorithm to make a first cipher; 

connecting to the second computer of a partic- 
ular connection address through a network to 
send the first cipher and the first identification 
data in the auxiliary data; 

20 receiving the first identification data and the 

first cipher in the second computer; 
selecting the first decocfing key which is the 
decoding key for the cipher corresponding to 
the first identification data received from a fust 

25 decoding key database, where a relationship 

between the first decoding key and the first 
identification data is stored; and 
decoding the first cipher on the basis of the first 
decoding key to obtain the first data. 

30 

11. The method of cryptocommunication described in 
Claim 10. and characterized in that it comprises the 
further steps of: 

35 generating with a first means for generating 

ciphers in the first computer a second cipher 
key and a second decocfing key paired with 
each other; 

obtaining a third cipher which is the second 
40 cipher key enciphered with the frst cipher key 

in the first computer; and 
sending the third cipher to the second compu- 
ter. 

45 12. The method of cryptocommunication described in 
Claim 1 1 , and characterized in that it comprises the 
further steps of: 

decoding the received third cipher with the first 
so decoding key to obtain the plaintext of the sec- 

ond cipher key in the second computer; 
obtaining a fourth cipher which is the second 
data enciphered with the second cipher key; 
and 

55 sending the fourth cipher to the first computer. 

13. The method of cryptocommunication described in 
Claim 8, and further characterized in that, at the 
step of reproducing two or more cipher keys and/or 
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decoding keys for public key cipher from auxiliary 
data which include public key cipher, at least one of 
the cipher keys and the decoding keys is an elliptic 
function cipher. 

5 

14. The method of cryptocommunication described in 
Claim 8, and characterized in that it comprises the 
further step of using an optical disk with auxiliary 
data including a connection address data of the 
second computer, and reproducing the connection io 
address from the auxiliary data. 

1 5. An optical disk recorder for modulating a main data 
by a first method of modulation and recording the 
data by radiating a laser beam through an optical 15 
lens on to the recording layer of a first recording 
area of an optical disk, the recorder being charac- 
terized by: 

reproducing, before recording, the auxiliary 20 
data in a second recording area, where a first 
identification data and a first cipher toy for a 
cipher and/or a decoding key for a cipher are 
recorded by a second method of modulation; 
making a main cipher which is the main data 25 
enciphered with the first identification data 
and/or the f irst cipher key and particular cipher 
algorithm; and 

recording the main cipher in the recording layer 
of the first recording area by the first method of 30 
modulation. 

16. The optical disk recorder described in Claim 15, 
and further characterized by: 

35 

receiving in a reception part the second cipher 
which is the first data enciphered with second 
cipher algorithm and a recording permission 
data permitting recording the first data in an 
optical disk; 40 
obtaining a second decoded data through 
decoding the second cipher with a second 
decoding means; 

making a main cipher through enciphering the 
second decoded data with first cipher algorithm 45 
different from the second cipher algorithm and 
an auxiliary data in a cipher computing means; 
and 

recording the main cipher in the first recording 
area of the optical disk only if the recording per- so 
mission data is present 

17. The optical disk recorder descrfoed in Claim 16, 
and characterized by: 

55 

mounting an IC card having a computing unit 
therein; 

inputting into the IC card the first identification 
date for identifying the disk of the auxiliary 



data; 

computing the first identification data with the 
computing unit; 

inputting the result of the computation into, the 
cipher computing means from the IC card; 
obtaining a main cipher which is an enciphered 
second decoded signal; and 
recording the main cipher in the optical disk. 

18. An optical disk reproducer characterized by 

reading with an optical head and a first means 
of demodulation an optical disk including a first 
recording area, where a main cipher is 
recorded by a first method of modulation, the 
main cipher being a first data enciphered with a 
first identification data by a cipher means; 
reproducing with the optical head and a second 
means of demodulation an auxiliary data 
recorded in a second recording area of the opti- 
cal disk by a second method of demodulation; 
and 

obtaining the first data by decoding the main 
cipher by means of the decoding means with 
the first identification data in the auxiliary data 
or a first auxiliary identification data which is 
obtained from the first identification data 
through a predetermined computation. 

19. The optical disk reproducer described in Claim 18, 
and further characterized by the method of modula- 
tion-demodulation of the first means of demodula- 
tion being a method of 8-16 modulation- 
demodulation, and the method of demodulation of 
the second means of demodulation being a method 
of phase encoding demodulation. 

20. The optical disk reproducer described in Claim 18, 
and further characterized by the decoding means 
including a number "n" of decoding keys, and 
selecting one of the decocfing keys on the basis of a 
decocfing key identification data reproduced from 
the main data in the optical disk. 

21. The method of permitting the use of a program 
descrfoed in Claim 6, and characterized in that it 
comprises the further steps of: 

connecting a first computer through a network 
to the second computer with a particular 
address; 

sending to the second computer the first identi- 
fication data for identifying the disk in the auxil- 
iary data; 

computing in the second computer the first 
identification data through a particular cipher 
operation, and sending the resultant (obtained) 
password to the first computer; 
computing the password and the f irst ktentifica- 
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tion data in the decoding operation part of the 
first computer, and sending the resultant sec- 
ond decoding code to a cipher decoder; and 
enabling an impermissible part of the main 
data in the optical disk to be used with the sec- 
ond decoding code by means of the cipher 
decoder. 

22. A method of inspecting the illegal installation of a 
program, the method being characterized in that it 
comprises the steps of: 

reproducing with a first computer an optical 
disk including a first recording area, where 
main data are recorded in the form of pits, by a 
first method of modulation, and a second 
recording area which is a predetermined area 
in the first recording area, where a reflection 
film is removed partially, so that auxiliary data 
are overwritten by a second method of modula- 
tion, which differs from the first method, the 
auxiliary data including a first identification data 
recorded therein for identifying individual opti- 
cal disks, the main data including a first pro- 
gram, an installation program for installing the 
first program in the hard disk in the first compu- 
ter, and a communication program recorded 
therein; 

reproducing the first identification data from the 
auxiliary data; 

installing the first program in the hard disk; 
record ng in the hard disk the first identification 
data or the first auxiliary identification data 
which is obtained from the first identification 
data through a predetermined computation; 
and 

sending, when the installed first program starts 
or performs a particular operation, the first 
identification data or the first auxiliary identifi- 
cation data by means of the communication 
program to a second computer connected 
through a network to the first computer; or 
checking through the network the second iden- 
tification data which corresponds to the first 
identification data in the hard cfisk of the sec- 
ond computer or the second auxiliary identifi- 
cation data which is the second identification 
data computed through a particular operation; 
and 

Smiting the particular operation of the first pro- 
gran or adding a particular operation when the 
first and second identification data coincide or 
the first and second auxiliary identification data 
coincide. 

2a An optical disk including a first recording area, 
where main data are recorded in the form of pits, by 
a first method of modulation, and a second record- 
ing area which is a predetermined area in the first 



recording area, where a reflection film is removed 
partially in the form of radially long bars from which 
the data cannot be read with the naked eye, so that 
auxiliary data are overwritten by a second method 
5 of modulation, which differs from the first method, at 
a lower recording density than the main data, the 
optical disk being characterized in: 

that a first identification data for identifying indi- 
10 vidua! optical dishs is recorded in the auxiliary 

data; 

that a first data is recorded in the main data in 
the first recording area of the optical disk, and 
that a data associated with the first identifica- 
is tion data is printed as a merchandise bar code 

which can be read by a merchandise bar code 
reader. 

24. The optical disk described in Claim 23, and further 
so characterized by the merchandise bar code being 

printed on the side other than the reproduction side 
of the optical disk 

25. A method of permission to use the program of a first 
25 data in an optical disk, the method being character- 
ized in that it comprises the steps of : 

reading a first identification data or a first auxil- 
iary identification date with a merchandise bar 

30 code reader in a first computer from an optical 

disk including a first recording area, where 
main data are recorded in the form of pits, by a 
first method of modulation, and a second 
recording area which is a predetermined area 

$s in the first recording area, where a reflection 

film is partially removed, so that auxiliary data 
are overwritten by a second method of modula- 
tion, which differs from the first method, the 
auxiliary data including the first identification 

40 data recorded therein for identifying individual 

optical cBste, the main data in the first record- 
ing area of the optical cfisk inducting an imper- 
missible part the use of which is not permitted, 
the optical disk having a bar code printed ther- 

45 eon from which the merchandise bar code 

reader can read the first identification data or 
the first auxiliary identification data associated 
with the first identification data; 
sending the first identification data or the first 

so auxiliary identfication data through a network 

to a second computer; 

computing with the second computer through a 
cipher operation on the basis of the first identi- 
fication data to make a permission data which 
55 permits the use of an impermissible part; 

sending the permission data to the first compu- 
ter; and 

printing the permission data on paper with a 
printing means by the first computer. 
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26. An optical disk including a first recording area, 
where main data are recorded in the form of pits, by 
a first method of modulation, and a second record- 
ing area which is the first predetermined area in the 
first recording area, where a plurality of radially long s 
parte of a reflection film are removed partially so 
that auxiliary data are overwritten over the pits in a 
tow frequency band for frequency separation from 
the main data, the optical disk being characterized 

by: 10 

the auxiliary data including a first identification 
data recorded therein tor identifying individual 
optical disks; and 

the main data including an impermissible part 15 
recorded therein which can be used with the 
first identification data and/or a specified pass- 
word. 

27. The optical disk described in Claim 26, and further 20 
characterized by being a read only type optical disk. 

2a The optical disk described in Claim 26 or 27. and 
further characterized by the specified password 
being obtained through a specified operation with 2s 
the first identification data. 
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Fig. 12 
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Fig. 17 
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Fig. 19 
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Fig. 21 
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Fig. 22 
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Fig. 23 
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